5 matches found
Sql injection
SQL injection vulnerability in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL commands via the FTVARSUBCAT txForumID parameter to forum/index.cfm and possibly other unspecified components, related to forum/include/error/forumerror.cfm...
CVE-2007-3705
CVE-2007-3705 affects FuseTalk 2.0, where a SQL injection flaw exists in the forum/index.cfm path. The vulnerability is triggered via the FTVAR_SUBCAT (txForumID) parameter and relates to forum/include/error/forumerror.cfm, allowing remote attackers to execute arbitrary SQL commands. The provided...
CVE-2007-3705
SQL injection vulnerability in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL commands via the FTVARSUBCAT txForumID parameter to forum/index.cfm and possibly other unspecified components, related to forum/include/error/forumerror.cfm...
CVE-2007-3705: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL commands via the FTVARSUBCAT txForumID parameter to forum/index.cfm and possibly other unspecified components, related to forum/include/error/forumerror.cfm...
Fusetalk SQL injection submission.
Greetings, I have found sql injection in FuseTalk 2.0 during a legitmate audit. Resending because I got MIME errors to [email protected]. I have exchanged emails with [email protected] who needed more information when I originally sent an email to [email protected] Operating...